Skip to content
Snippets Groups Projects
  • Jeff Vander Stoep's avatar
    0c7bc58e
    Remove domain_deprecated from sdcard domains · 0c7bc58e
    Jeff Vander Stoep authored
    Remove from blkid, blkid_untrusted, fsck, fsck_untrusted, sdcardd and
    sgdisk.
    
    Tested by adding external sdcard with and without
    "adb shell sm set-force-adoptable true" command.
    
    Address the following denials:
    avc: denied { read } for name="swaps" dev="proc" ino=4026536590 scontext=u:r:fsck:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { open } for path="/proc/swaps" dev="proc" ino=4026536590 scontext=u:r:fsck:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { getattr } for path="/proc/swaps" dev="proc" ino=4026536590 scontext=u:r:fsck:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { read } for name="filesystems" dev="proc" ino=4026536591 scontext=u:r:blkid:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { open } for path="/proc/filesystems" dev="proc" ino=4026536591 scontext=u:r:blkid:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { getattr } for path="/proc/filesystems" dev="proc" ino=4026536591 scontext=u:r:blkid:s0 tcontext=u:object_r:proc:s0 tclass=file
    
    Change-Id: I097e2ba5205e43f8ee613dae063f773a35ce3d73
    0c7bc58e
    History
    Remove domain_deprecated from sdcard domains
    Jeff Vander Stoep authored
    Remove from blkid, blkid_untrusted, fsck, fsck_untrusted, sdcardd and
    sgdisk.
    
    Tested by adding external sdcard with and without
    "adb shell sm set-force-adoptable true" command.
    
    Address the following denials:
    avc: denied { read } for name="swaps" dev="proc" ino=4026536590 scontext=u:r:fsck:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { open } for path="/proc/swaps" dev="proc" ino=4026536590 scontext=u:r:fsck:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { getattr } for path="/proc/swaps" dev="proc" ino=4026536590 scontext=u:r:fsck:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { read } for name="filesystems" dev="proc" ino=4026536591 scontext=u:r:blkid:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { open } for path="/proc/filesystems" dev="proc" ino=4026536591 scontext=u:r:blkid:s0 tcontext=u:object_r:proc:s0 tclass=file
    avc: denied { getattr } for path="/proc/filesystems" dev="proc" ino=4026536591 scontext=u:r:blkid:s0 tcontext=u:object_r:proc:s0 tclass=file
    
    Change-Id: I097e2ba5205e43f8ee613dae063f773a35ce3d73